--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T13:32:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T13:32:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-23T13:32:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-23T13:32:14Z" name: csr-72gvj resourceVersion: "6041" uid: 1f05027c-f4bf-4cbd-a654-ab64dc4784fe spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3ac6e42598bacd7d49f291bd25515daf46310b9abd4a11780ba14a31c101a54c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-22.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T13:32:14Z" lastUpdateTime: "2026-04-23T13:32:14Z" message: Auto-approved CSR "csr-72gvj" reason: AutoApproved status: "True" type: Approved